{"id":"CVE-2026-72229","summary":"batman-adv: clean untagged VLAN on netdev registration failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: clean untagged VLAN on netdev registration failure\n\nWhen an mesh interface is registered, it creates an untagged struct\nbatadv_meshif_vlan on top of it via the NETDEV_REGISTER notifier. But in\nthis process, another receiver of this notification can veto the\nregistration. The netdev registration will be aborted because of this veto.\n\nThe register_netdevice() call will try to clean up the net_device using\nunregister_netdevice_queue() - which only uses the .priv_destructor to\nfree private resources. In this situation, .dellink will not be called.\n\nThe cleanup of the untagged batadv_meshif_vlan must thefore be done in the\ndestructor to avoid a leak of this object.","modified":"2026-08-18T03:31:25.096804937Z","published":"2026-08-15T05:54:20.512Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72229.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/06ae245168268b705a204f93c318b30107d10e92"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5a82c558098889cc8bfff85cc62f563833205d91"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8669a550c752d86baebc5fdc83b8ff35c4372c0e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/86e32dfb6a6fe29898f4a562b7b6e38e480bba4d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c945f6007e7851e74706c72f98763023699bcd97"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dbca15fcbeed5276af440a53aed3901590fa7fc9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f15ca6250591cfe78408114a54eaa8d58da51bfa"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f2423da55976ea249f73029e468aefda4b94acba"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72229.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72229"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5d2c05b213377694a2aa8ce1ed9b23f7c39b0569"},{"fixed":"86e32dfb6a6fe29898f4a562b7b6e38e480bba4d"},{"fixed":"06ae245168268b705a204f93c318b30107d10e92"},{"fixed":"dbca15fcbeed5276af440a53aed3901590fa7fc9"},{"fixed":"f2423da55976ea249f73029e468aefda4b94acba"},{"fixed":"f15ca6250591cfe78408114a54eaa8d58da51bfa"},{"fixed":"c945f6007e7851e74706c72f98763023699bcd97"},{"fixed":"5a82c558098889cc8bfff85cc62f563833205d91"},{"fixed":"8669a550c752d86baebc5fdc83b8ff35c4372c0e"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72229.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.13.0"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72229.json"}}],"schema_version":"1.9.0"}